Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1084124306046D9A70DF1A3D64336672BA7C546E3CA1B0E8292F99BCE5B94D4CDC4B44A |
|
CONTENT
ssdeep
|
24:hrUsOQ/CXEONETC8ETC8ETCQwjW6nwjQ6X9wj+6HwjS60wjmN6/wju1u676MNEjd:tPP/Eo00t6N6XD6l6ON6Zu6EfzoB36 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9e9664c93933c94d |
|
VISUAL
aHash
|
1c3e3c3c183c0000 |
|
VISUAL
dHash
|
e4ececccb2f0c4f0 |
|
VISUAL
wHash
|
7e7e7e7e3c3c0000 |
|
VISUAL
colorHash
|
30206000000 |
|
VISUAL
cropResistant
|
e4ececccb2f0c4f0 |
Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.
Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)